Written by Klas Berlič
To accompany the official release announcement, I would like to point out few of the most important changes in this release:
.htaccess change that prevents looking at your extensions XML files - while this was not a security hole by itself, it kept open doors for hackers to see what version of particular extension you are running.
To put this fix into effect you have to uncomment (remove #) from corresponding section (lines 35-39) in htaccess.txt and rename htaccess.txt to .htaccess (or copy/paste that part into your existing .htaccess, must be inserted at the same place).
TEST before you put this on live site - if your site is serving publicly accessible XML than this is not directly usable for you - you would need to make exceptions for those files or use regex based rules for blocking. Also not usable for those without apache/mod_rewrite.
(Kudos to Brian Teeman for this fix)
PHP 5.3.x compatibility - Joomla runs fine on PHP 5.3.x now (except of OpenID library)
Core components caching - com_weblinks and com_contact are using cache for the first time. Also com_content view cache comes with more refined caching logic, so that caching is disabled only where it needs to be (e.g. for users using filters). This should result in speed increases on high-traffic sites.
Other notable bugfixes:
- TinyMCE is now working properly - all remaining bugs created by the recent TinyMCE upgrade should be gone now
- Mootols were upgraded to 1.12 to ensure future compatibility with Firefox 3.6
- Joomla 1.5.15 Security Release...
Joomla releases Joomla 1.5.15 - A security Release compromising of two security issues found in Joomla 1.5.14. ... - Joomla 1.5.14 Released...
Joomla! released 1.5.14 on July 30, 2009, only eight days after releasing 1.5.13. ... - Joomla 1.5.11 Security Release...
The Joomla Bug Squad released Joomla 1.5.11; the latest security release to the 1.5x series that includes 26 bug fixes, two moderate-level security fixes and one low-level security fix. ...





